Hi all,
I need to collect TCP SYN flood and normal traffic in cloud environment to analysis it and create anomaly intrusion detection system.
any one help me please and suggest how I can create a small test bed for cloud infrastructure to launch my experiment.
There are many testbed solutions intended to support
security-related simulations in various manners. Some of them,
namely DETER and TWISC , employ the generic and publicly available Emulab/Netbed infrastructure solution,which provides them with basic functionality for virtual appliances’ deployment, flexible network topologies configuration,various network characteristics emulation so you can go through this for your experiment it will be helpful
It should be fairly straight forward to set up a cloud infrastructure using things like OpenStack or OpenNebula (links below) and set up monitoring of network traffic or application logs (like web server logs). If you really want to catch a real SYN flood among real normal traffic, the tricky and difficult part is to have a service running on your cloud that is interesting enough to attract both normal usage and SYN floods. Perhaps hosting a mirror of popular open source software (e.g. CYGWIN or repository for Linux distributions) would give you a site that would attract both.
www.openstack.org
opennebula.org
it appears to me that the urllib2 has a vuln as well as most all of the headers, if the site goes down, which means coming back to sqli wouldn't be unheard of.. this code is from Saphyra.py. Attempting to write a blackhole for it's attack.
Also, these links may be useful for you :
http://innovativejournal.in/ajcsit/index.php/ajcsit
http://icact.org/upload/2014/0281/20140281_finalpaper.pdf
- Badges
- Science method